Annonces locales et régulères des activités du hackerspace rennais

Text archives Help


[annonces] Talk reproductible builds - Chris Lamb (Debian Project Leader) - Mercredi 9/01 18h @ ISTIC


Chronological Thread 
  • From: "Mathieu Goessens (Breizh-Entropy)" < >
  • To:
  • Subject: [annonces] Talk reproductible builds - Chris Lamb (Debian Project Leader) - Mercredi 9/01 18h @ ISTIC
  • Date: Mon, 7 Jan 2019 19:18:15 +0100
  • Autocrypt: addr= ; prefer-encrypt=mutual; keydata= mQENBEq1RT0BCACrgMzwTwBqzDp1tRdZAdVHrqwxcU4fsqIZ8R7sycV2nAr8ycal8Q0rU/Is G4WXZKAlc3/RKphaH0dnppT1WVpv3OI0hYiVNhEoToRIEUgJwnnraWJIBIVGaCcVDwK8jHOM f1fyNbqIMCN5CoyZ611S7jmiK+VhZGd+w4u3+jx6w5g+dKpyRNnEXNkpjPghBpdI52Hpk4Hl sP/U580vr0JcLM/r1q+hyrBOnmw5SUa9VV3FuwW8/+tsBjcXLSd4qe4f8g68PQkpveRwVJlf 15Nca/mrPNwKZ//ERl3kZrEj2QsHT8olEqe2U0wjyviCy8w8torFsW/A7KEKTW8VPn4ZABEB AAG0LU1hdGhpZXUgR29lc3NlbnMgPG1hdGhpZXVAYnJlaXpoLWVudHJvcHkub3JnPokBPQQT AQIAJwIbAwIeAQIXgAUJEbybzQUCU1Nc/QULCQgHAwUVCgkICwUWAgMBAAAKCRBjLokxbaa4 QqOcB/9ijX75Y37PL1h83zwxsR5nP/SANg157TqCBRPgWZyiCEUQV4j321i7+QgTOhgGdI/A xD4yyFkaIjEoMRwZthqLmZazL1iLyCey+OboKGeYCxvrOAS+BXYSb8XfpeXikRvwpia/yS+Z rfYCbnfRhQVzFrd/YAPpkzXHqmcxQ+ym9CMGJvF83PtCdUrlK8T3EVSeuzmkB/zoodjdmETF EgVil/pv0z51kXusiPdprLaU/vLxQlci9+wyscMHXY7qNDQcx7El4p+GDD4W4Y3cdPhmtI4n WeO2wnP235joegYu/W9+LE8Z3H+MZ6KOK66Lt64xkdlywnYd345MjR+NN6gLuQENBEq1RT0B CACaBhNhzPZa2E2wz1fy16lTO3tCkjrQQV7C4ghWlpVcbxhtqkiY6R28J6NtGR9Tzy7oRBJx 7nHmB624rFNRO+EjJmiH8X4VTV3uQPt1ZPGiNbDX8P/TKMTCKWNWTmlTD1G5AlQmGkTDQAUE GGC/fIFvoIuEd8CLASU3ag3sgXPPr7N158JcuNoDFBl56iLtsfSWaKpXUhvkNTqT0l94MJfW PqRbeNmyjAtr+nHot/V2vi8Y06VYdpS2xKD2BxcpB8PWKTrka/yfJVTOQlYEdzrd25JtyXtG KxOIHpNlJQIS32HBlTmBwJ31+qn7pbgFsFYwXtJ8Iq34Zh/eQSAz/qSLABEBAAGJASUEGAEC AA8CGwwFAlML37UFCRG8m/UACgkQYy6JMW2muEJPXwf+Jyj5rl+Ev7g3qIhLv8x4gaxapXGz 5TjsMcV+pExwltGFwPo5Tpgin2B2rxAdSFOUcpDKf7W20j9QjJWebapWpXDnc5XmF9I0RA2n yly9MRDOzsEiRzsfZO3zoq9fShUXGBFnuUeFwXQx+eoyBAcoe+Swxio4MtuOwHGFE2iBPHFh 4j7tKxYJS/AZX8MDjJxL6REgLm4IL+klHmNvCGuQKJ1NSFV/m9OcAm9coMy9FinM5Pv0Ke8f uX8In1FaReK+K/volAwF16b4y6Y8kXWGYEChr9RBS9MzBZfknAD/TaUX8v9QsxclwA3n0Mk0 e08xDiOzmvLPVXX0zRq3lVkYh7kCDQRTC9s6ARAA5k1TmDN4A5XRV7H2coZNPA++/U4GApk+ mCYqsRPSmjFjj1Yo+dP+2+fXwBWp5NvAjkLdiiwC3iRiXl+DzT/JcA5QA/mLkCpxxeiV1UmR lQkh4k+Z2YBp6Lk0JUq3zgImAirxQs3kez4A030vqc/a3BB5mDSV9GYHOe850FUp56k3V8T0 V4HseAlgVDvmt0P49k1rsneqzfaY8RpMktOal8Ws+0sKcUXeDIn4RNJyTrm7cU0t+QJDUFf/ 5D+7+Ltcq2jqgS/dtINLEZcyGauJDNf0t8kOvHUOCh0gzEKFp87a4kvsAQX+3t+pMoFAaSQ6 AwcIU3C1CmL5O0/t+mb++hP6NfNvXQ4lJFv5v1proZsN66GzYmtsma03tFNkCQ+C0mWV65v0 5SjzKZGlZnw0qwylzwQd65u3ZOjZtGADXg1ELwiEfAlZsOkLFX4a8XwmH4LKkkOmtchq0g8Q F84UvjO1KI/aFT8mJDelZAYIMaoLlib11GpFPt+T3hSHfq2sTmd1jBdp4hcDxAmfjIaG6Wod +apnoberK8EZP/8NcPzBTUUu6vOmk/1UlPrDQRotY2Y2DXnwZJzXhgqvq1woBVJpxvzBGUWG 0hayGrJjHeZlkU9qzwcu3889YMmxN4BljYIck52CidAH54LCfHI9U8EJfLrXLZEMB9AJzbF7 ICkAEQEAAYkDRAQYAQIADwIbAgUCUwvf6QUJCWYGLAIpwV0gBBkBAgAGBQJTC9s6AAoJEILY mi3WiuEoDREP/iFUV/Dga0WS0Uk4Wy1beMus0wSwtgQLc7+SU7HelF6DKT5GSy6/Wgkos30V FN3sLl2cCHE4EQtCfTybjTDJxIocvhBZBQP1MPeR6GYacxpJR+GV9Eoj/idwrRWcCkzDhONc QPkwqjpBX75z5SGCYua28DDc0V2DCfD8a8dOeVf+JvZRBfs09BX1uxA2Tf8NoG7EyX93wpZ8 pAy1/EV9vrrUoZ2ipMIOqbaLNJP3bTfv7sRU3EIMccM+ZmjJvc2kVNWHcd3kx6qHgEKcweMp /ktRzW517hEUL4mxnlMHUx5ybdaUPshwhpdWoiGNywRQfdz14zv1ECLsKLYEzGggql3P2Rqg 4FO5A4NiUraCzOzXSSDqT9NcesYKV5T8n0bXZ3tIh/YmLi5w+qm2o3QAPyFd0HMnhXHzrSaH yd8Kn4oY9oG0SKcGWnbMuuj4+WMO5jLVRBWWcG/E/C4Kqqf6iQ40dZpd/BjyeKFt/DlITLoR MpWWhwl+N+79bjlDLo0Iclotse2dIAAl37yupSFRXSCCIgjbJ8hs9bU4HTg2tjCQ0CvpULTb pO97JCQ+VCrhgufNTDs0mCwutvUpcAHQlRpixMHLkBnwQcuNd7x6GQa9AUBNDOyTF0wRXHg4 tevDkqPhciE3m/WBk0Csr1FtzrS+VAY5MMLkvkZ/wahFW/HRCRBjLokxbaa4QpblB/0adWYg yOXSF7AFPXpZ5LKs5rEm9jDDZAnulamp3a+8EW1gJFDqP4WrBYaNsuEOhj6On5K8O8p4wh3J CMiY8kWJWOWgH6ien2djmCXoDpEafwV31BjV0WwxZCLynoqj90SNuf1Y9hltx+e5Cmhn3NPH 2oRjZBjMHkx8IguU8CcvlpG3ym2iva6s3OuFgW9Yrj+glWHiLsNLdvMp89vwqt0n9HoH3HrS F953QglP4uTnTdZ4VWzmp0Qgnh3k+Df+x9gLfOwGeI61B1YU/fE5O0TnMmQ0flvdTgpuO2/o E+mmDFuJxJjrU+tD20fuWpk1nYmsusRI985zfJeLIwxq6W0KuQINBFML+6IBEACsFaeZQb+t 4VWDnosJExeCXSe7jNPSRZ4KUmkYrlxq1NTio6fLSnZn0Q7YrWcpaiThgvpigZN2tQNxl4fj F3WQ7dhQkzIuTDdrGvaDbcvSiarHDmLHnfmZlqADa6vxjCIt4mVx2/V2RcVf163zfP+U990i GmuA9WTVYKSmN+8mUHhuHoUzUI8/SwmX4kjqehVwE+aI3lrLdd9npDeGQ5O1+QJ4HeFJbzDh XkP5esPIrDWtHnjUP8+VNOnlnXtPRU3kIuUMPi1nphvdRuXPLRdLcgS6IiDLO5mW9+/VQ0gY 3GN/BxWNAQ+iVrdMYCYlidKutJ/fed0GukV4YTvmlo7G5bdUHz1SmEidk6m6PozLFs5DRl3Y UpG94nHSevStRlMZeozR5dLiKBPh0idFJzuhwa1VOVsQiA/99DVxQeoWmYDwH9/psBvgvUkC 2EgO+oUmlvaKrudFJ+YNr8/Pd4fsIi1cvPXtR4fWsPmppyodP+91TEFiCszqDLZLs+IWNWAF qrCr7qLU0c7SsRPLpSt8lasgITIdJKEyJB6t1is3dAtwokReOa4La4MKYVDIJ7aFvmOsiP5h Bv1SaWse2ry5Qp/7aSaJu7NUVu7FYcIDAnfPqVPRvWsaXrU/piVn9HoGCjveOUqWwNPcz+y9 ZU2wZudFCJ4rsRGYIuMnuKI2XwARAQABiQElBBgBCgAPBQJTC/uiAhsMBQkJZgGAAAoJEGMu iTFtprhC0j4H/iT++TxZrxiMC5dxcd3LPaf3PXkNgLpv2Z8psajEapAUG4GFZQr3jenv+PW6 51gZxo/OXcPs6X+ilukH41UFEbKzMnhRW7QGZ9sTn/5dkWYY1+JCVppG9OjcYSTqYUh6ctQA RroeGXQyAHYRgAPtz59KNyyXo+XaCvQ1387r+s4Q13FHETgp1mYvPnexzI/hlK/FygdfhDPT s0CSAl/HT7gx4DwB2q6O8ib6YXvHgeSUo1EoivNYbQtQ45HfK7cjaYP4bpx0dUBvgxlG4+sm d/e5rCBNlD3qm4Lawaf/Q9SImC6j0ugv1YbbWLtiTC3EK4FKhBm1AhL9/F0CG1o0hCQ=
  • Openpgp: preference=signencrypt
  • Organization: Breizh-Entropy

Bonjour,

En prélude du Festival Des Libertés Numériques (fdln.insa-rennes.fr),
l'ISTIC (istic.univ-rennes1.fr) et l'association Actux (actux.eu.org)
ont le plaisir de vous convier à une conférence *le mercredi 9 Janvier à
partir de 18h30 à l'ISTIC* au sujet des builds reproductibles, animée
par Chris Lamb, actuel Debian Project Leader :

You think you're not a target? A tale of three developers...
============================================================

If you develop or distribute software of any kind, you are
vulnerable to whole categories of attacks upon yourself or your
loved ones. This includes blackmail, extortion or "just" simple
malware injection… By targeting software developers such as
yourself, malicious actors, including nefarious governments, can
infect and attack thousands — if not millions — of end users!

How can we avert this? The idea behind "reproducible" builds is to
allow verification that no flaws have been introduced during build
processes; this prevents against the installation of backdoor-
introducing malware on developers' machines, ensuring attempts at
extortion and other forms of subterfuge are quickly uncovered and
thus ultimately futile.

Through a story of three different developers, this talk will engage
you on this growing threat to you and how it affects everyone
involved in the production lifecycle of software development, as
well as how reproducible builds can help prevent against it.

Debian, openSUSE, Tails, Tor, Bitcoin, F-droid and coreboot/libreboot
are examples of projects that have adopted reproducible builds or are
pushing hard for their adoption.

About the speaker :
===================

Currently Project Leader of the Debian GNU/Linux project and a
member of Board of Directors for the Open Source Initiative,
Chris is a freelance computer programmer, author of dozens of
free-software projects and contributor to 100s of others.

He has been official Debian Developer since 2008 and is
currently highly active in the Reproducible Builds sub-project.
In his spare time he is an avid classical musician.

Informations pratiques :
========================

Rendez-vous le *mercredi 9 Janvier à partir de 18h30 à l'ISTIC*
(Université de Rennes 1 campus Beaulieu) – Amphi P - Bâtiment 12D
263, avenue du Général Leclerc, 35042 Rennes

Bus C4/C6(/40/41) ; arrêt "les préales" ou "Tournebride"
Plan : https://osm.org/go/eri2dpt3A-?m=&way=381248508

Gratuit ; accès dans la limite des places disponibles ; intervention en
anglais si vous ne l'aviez pas deviné ;-)

Cet événement vous est proposé en introduction du Festival Des Libertés
Numériques organisé par l'INSA, les Universités Rennes 1 & Rennes 2,
l'IMT Atlantique [...] et qui proposera, du 25/01 au 09/02, près de 50
événements autour des problématiques de vie privée, de sécurité en ligne
etc, à Rennes et autour. Plus d'informations sur le site du festival :
https://fdln.insa-rennes.fr

En espérant vous y voir nombreux-ses,
L'équipe organisatrice

--
Mathieu Goessens
Hackerspace Breizh-Entropy


  • [annonces] Talk reproductible builds - Chris Lamb (Debian Project Leader) - Mercredi 9/01 18h @ ISTIC, Mathieu Goessens (Breizh-Entropy), 01/07/2019

Archive powered by MHonArc 2.6.19+.

Top of page